[110372] in cryptography@c2.net mail archive
RE: More on in-memory zeroisation
daemon@ATHENA.MIT.EDU (Dave Korn)
Mon Dec 10 14:47:59 2007
From: "Dave Korn" <dave.korn@artimi.com>
To: "'Peter Gutmann'" <pgut001@cs.auckland.ac.nz>,
<cryptography@metzdowd.com>
Date: Mon, 10 Dec 2007 18:29:20 -0000
In-Reply-To: <E1J1FSg-0004Op-Uy@wintermute01.cs.auckland.ac.nz>
On 09 December 2007 06:16, Peter Gutmann wrote:
> Reading through "Secure Programming with Static Analysis", I noticed an
> observation in the text that newer versions of gcc such as 3.4.4 and 4.1.2
> treat the pattern:
>
> "memset(?, 0, ?)"
>
> differently from any other memset in that it's not optimised out.
> Can anyone who knows more about gcc development provide more insight on
> this? Could it be made an official, supported feature of the compiler?
I'm sure it could; why not raise it on the GCC mailing list? It sounds like
all it would involve would be a patch to the documentation and maybe a comment
in the source.
cheers,
DaveK
--
Can't think of a witty .sigline today....
---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo@metzdowd.com
